Google Professional Cloud Network Engineer Question 440
Select 3Google Cloud PlatformYou are deploying an application on GKE and need to expose it to the internet using a load balancer. The application requires advanced traffic management features, such as URL routing and SSL termination. Which configuration steps should you take to meet these requirements?
- A
Configure a GKE Ingress resource and associate it with a Kubernetes Service of type 'NodePort'.
- B
Create a GKE Gateway resource using the Gateway controller and configure HTTPRoute resources for traffic management.
- C
Use a BackendConfig custom resource to enable SSL policies for your GKE Ingress resource.
- D
Attach a Network Endpoint Group (NEG) to your GKE Service to enable granular traffic management and health checks.
- E
Deploy a Kubernetes Service of type 'LoadBalancer' and configure URL routing rules directly in the load balancer.
Show answer and explanation
Correct answers: B, C, D
Explanation
To expose the application with advanced traffic management features, the GKE Gateway controller and HTTPRoute resources provide the required capabilities. BackendConfig enables configurations like SSL termination for Ingress, and NEGs facilitate granular traffic management and health checks. A basic 'LoadBalancer' Service, while functional for simple use cases, does not meet the requirements for URL routing or SSL termination.
- A. Incorrect.
Incorrect: While a GKE Ingress resource can expose services, it requires additional configuration for advanced traffic management like SSL termination or URL routing. Associating it with a 'NodePort' Service is unnecessary and does not align with best practices.
- B. Correct.
Correct: The GKE Gateway controller supports advanced traffic management features, including URL routing and integration with HTTPRoute resources, making it suitable for this use case.
- C. Correct.
Correct: BackendConfig custom resources can be used to configure SSL policies, enabling SSL termination for GKE Ingress resources.
- D. Correct.
Correct: Network Endpoint Groups (NEGs) allow granular traffic management and enable health checks for backends, making them critical for advanced load balancing configurations.
- E. Incorrect.
Incorrect: Kubernetes Services of type 'LoadBalancer' do not natively support advanced traffic management features like URL routing. These capabilities require additional resources, such as Ingress or Gateway configurations.